Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
File: 0bvzaAza5sJnqY0D0I9rI9DtHUY.mft (raw, json)
Hash identifier: AHak6t7EkO+Xa23G2MFgJLWrjwd+nHAkUT1rYjChfUM=
Subject key identifier: 2A:5A:13:C4:90:B5:08:7B:FF:50:1E:CC:24:72:F9:09:A7:6C:C6:F4
Authority key identifier: D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
Certificate issuer: /CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Certificate serial: 019CAC46ECE940DA4BAA1F78964433036F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:00:55 +0000
Manifest this update: Mon 02 Mar 2026 02:00:55 +0000
Manifest next update: Tue 03 Mar 2026 02:00:55 +0000
Files and hashes: 1: 0bvzaAza5sJnqY0D0I9rI9DtHUY.crl (hash: 4Od1J8lbw4Tst942oa3gMzueH5Vw+vfjmbG03yOjFYw=)
2: 7Se3cx4TBdWjHAwq4txVyQrcrpQ.roa (hash: qn754SyayB45Cx33yiucDcB81nUdDdHn60qsbH3DxoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ec:e9:40:da:4b:aa:1f:78:96:44:33:03:6f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Validity
Not Before: Mar 2 02:00:55 2026 GMT
Not After : Mar 3 02:00:55 2026 GMT
Subject: CN=2a5a13c490b5087bff501ecc2472f909a76cc6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4e:47:19:00:d4:23:0f:b1:33:af:a9:4b:b2:
70:65:19:76:2a:d4:d3:0f:56:86:88:fd:a6:3b:f1:
c9:4a:97:c4:23:2e:5a:c1:e7:e6:d1:15:99:31:f5:
b9:24:94:ca:6c:5d:a4:af:79:83:fe:53:af:30:f7:
fa:fe:fe:16:6f:1a:73:b2:84:f1:3b:20:a0:5d:18:
45:1e:bb:ad:bb:68:c7:96:ce:dd:bd:13:76:59:69:
f3:05:c4:29:97:ae:53:c0:2d:0d:d3:b5:cd:72:b1:
f2:fd:78:0d:2d:36:1c:4f:43:86:27:e1:13:c4:75:
c9:07:01:59:cd:ab:7a:da:d3:d2:78:2d:4f:8b:f2:
64:f7:ce:8a:38:36:c4:47:00:f2:37:c7:34:f1:9a:
af:9a:8f:06:6e:c6:b9:70:7b:db:ca:56:ea:8f:0b:
f8:d6:68:dc:59:00:36:7c:0e:0e:dd:db:ad:67:bd:
bc:ae:24:b1:a3:65:3a:2d:a7:7d:8e:38:43:42:9f:
98:18:23:a7:f9:f5:c5:fc:7c:f5:eb:18:f2:7b:72:
90:a2:b5:70:3e:ef:7e:5e:52:20:47:48:c1:12:9c:
67:33:b2:39:0a:7a:12:a6:f6:dc:d5:c8:a6:23:c2:
72:f4:90:45:1c:d2:f9:de:41:b6:0c:76:3f:a6:6a:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5A:13:C4:90:B5:08:7B:FF:50:1E:CC:24:72:F9:09:A7:6C:C6:F4
X509v3 Authority Key Identifier:
keyid:D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:da:78:9f:b9:69:c4:9b:ea:e3:08:62:95:28:65:46:30:30:
04:27:d2:7b:35:83:7a:84:b5:a4:30:af:2e:44:fc:53:6d:5f:
24:e2:a4:46:16:e5:84:17:44:4b:fa:df:9a:08:31:1a:8b:c9:
df:fb:29:88:ed:ee:99:a6:ce:78:36:02:9d:8f:5b:2f:a8:85:
e8:17:d7:be:ce:8c:c0:6c:0a:d6:88:0c:3d:8e:f3:65:1c:74:
41:4d:69:0e:72:42:57:9e:c7:27:c9:38:55:a1:52:84:c7:43:
91:7d:5b:d8:55:5f:18:6d:2d:f3:c0:24:31:92:f7:fa:9f:10:
5e:74:7a:a4:c4:5f:de:22:58:4a:0d:98:23:e3:67:cd:e1:66:
ac:5f:f1:5e:7f:ac:30:c3:fd:1f:16:88:5b:e8:30:66:78:5c:
5c:63:07:fa:19:6d:97:ec:08:05:90:8b:dd:1b:6c:19:76:30:
30:05:76:70:d8:f0:4e:69:3a:55:8c:5d:bf:f3:d5:46:ee:57:
7b:01:d5:df:6e:21:dc:8e:28:22:5b:f1:eb:70:74:61:9d:24:
d0:8a:39:a0:37:0f:f4:2a:50:81:e1:6c:cc:96:b6:4a:fa:35:
bc:63:15:1c:8e:aa:07:c6:f8:74:cc:0b:66:c8:c4:cd:10:0a:
e8:27:db:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRuzpQNpLqh94lkQzA291MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYmJmMzY4MGNkYWU2YzI2N2E5OGQwM2QwOGY2YjIzZDBl
ZDFkNDYwHhcNMjYwMzAyMDIwMDU1WhcNMjYwMzAzMDIwMDU1WjAzMTEwLwYDVQQD
EygyYTVhMTNjNDkwYjUwODdiZmY1MDFlY2MyNDcyZjkwOWE3NmNjNmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4k5HGQDUIw+xM6+pS7JwZRl2KtTT
D1aGiP2mO/HJSpfEIy5awefm0RWZMfW5JJTKbF2kr3mD/lOvMPf6/v4WbxpzsoTx
OyCgXRhFHrutu2jHls7dvRN2WWnzBcQpl65TwC0N07XNcrHy/XgNLTYcT0OGJ+ET
xHXJBwFZzat62tPSeC1Pi/Jk986KODbERwDyN8c08Zqvmo8Gbsa5cHvbylbqjwv4
1mjcWQA2fA4O3dutZ728riSxo2U6Lad9jjhDQp+YGCOn+fXF/Hz16xjye3KQorVw
Pu9+XlIgR0jBEpxnM7I5CnoSpvbc1cimI8Jy9JBFHNL53kG2DHY/pmo8yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpaE8SQtQh7/1AezCRy+QmnbMb0MB8GA1UdIwQY
MBaAFNG782gM2ubCZ6mNA9CPayPQ7R1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNTJlODQtZWI4NC00NWMyLWI2YzUt
NTFjMWZhYTQ3MThmLzEvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kNTJlODQtZWI4NC00NWMyLWI2YzUtNTFjMWZhYTQ3MThm
LzEvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtp4n7lp
xJvq4whilShlRjAwBCfSezWDeoS1pDCvLkT8U21fJOKkRhblhBdES/rfmggxGovJ
3/spiO3umabOeDYCnY9bL6iF6BfXvs6MwGwK1ogMPY7zZRx0QU1pDnJCV57HJ8k4
VaFShMdDkX1b2FVfGG0t88AkMZL3+p8QXnR6pMRf3iJYSg2YI+NnzeFmrF/xXn+s
MMP9HxaIW+gwZnhcXGMH+hltl+wIBZCL3RtsGXYwMAV2cNjwTmk6VYxdv/PVRu5X
ewHV324h3I4oIlvx63B0YZ0k0Io5oDcP9CpQgeFszJa2Svo1vGMVHI6qB8b4dMwL
ZsjEzRAK6CfbCg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:57 2026 by rpki-client